Surge in Crypto 'Wrench Attacks' Results in $124M Losses in Six Months

Summary

• In the first half of 2026, CertiK reported 52 "wrench attacks"—a form of physical coercion against crypto owners—up from 39 in 2025.
• The financial losses surged to $124.1 million, a stark increase from $10.5 million in the same period last year.
• Europe accounted for 75% of these incidents, with France alone contributing 33 cases.

Recent data from blockchain security firm CertiK reveals a disturbing rise in violent attacks aimed at cryptocurrency holders. Between January and June 2026, 52 incidents of "wrench attacks" were recorded, marking a 33.3% increase from the previous year. The total financial impact of these attacks skyrocketed to $124.1 million, compared to just $10.5 million in the first half of 2025. This translates to an average loss per incident jumping from $270,000 to $2.39 million.

The CertiK report highlights a troubling trend: the rise of violent crime in the crypto space.

Key findings include:
• 52 confirmed wrench attacks (up 33.3% YoY)
• $124.1 million in financial losses
• Home invasions have emerged as the primary method of attack

— CertiK (@CertiK) July 22, 2026

CertiK cautioned that these figures may not capture the full extent of the problem, as many victims might not report incidents due to fear of retaliation or reputational harm. The report identified a sharp increase in home invasions, which rose from one case in the first half of 2025 to 20 in 2026, making up approximately 41% of all recorded incidents. Kidnapping cases also escalated from 12 to 16, while one murder was noted in both periods.

Global Overview of Crypto Wrench Attacks

Geographically, Western Europe has become a hotspot for these attacks, with the region accounting for 75% of all verified incidents. France was particularly hard hit, with 33 recorded cases, roughly 64% of the global total. The prevalence of wrench attacks in France has been attributed to its robust crypto market and recent data breaches, which have provided attackers with lists of potential victims.

CertiK observed a shift towards more organized crime, with perpetrators using data from leaked sources to prepare for attacks. This has led to a new trend of creating "target packages" based on individuals' transaction histories, emphasizing the need for enhanced data protection to ensure personal safety.

In light of this evolving threat, CertiK is revising its security recommendations. While hardware wallets and secure seed phrases are helpful, they are insufficient if an owner is forced to disclose access. The firm now advocates for using multi-signature wallets, implementing withdrawal delays, and establishing family protocols to manage duress situations effectively.

The upward trend in wrench attacks is alarming, with 72 incidents recorded in 2025 alone—a 75% increase from 2024. One particularly shocking case involved the kidnapping of Ledger co-founder David Balland in January 2025, where captors resorted to extreme measures to extract a ransom.

This trend of targeting family members has become increasingly common in France. In February, six people were arrested for abducting a magistrate and her mother in a crypto ransom plot. In another incident, two teenagers attempted to kidnap the wife of The Sandbox co-founder Sébastien Borget but were thwarted by neighbors.

In response to the rising violence, French authorities have intensified efforts to combat these crimes, charging 88 suspects across multiple investigations by April, including several minors. Measures are being put in place to protect crypto holders, such as regular welfare checks for executives.